D-Link DFL-260-IPS-12, DFL-1660-WCF-12, DFL-2560-AV-12, DFL-2560-WCF-12, DFL-260-AV-12 Datasheet

...

Page 1

Product Highlights

Intrusion Prevention System

Dectects and prevents known and unknown attacks/ exploits/vulnerabilities, preventing outbreaks and keeping your network safe.

Gateway Anti Virus Protection

Detects and blocks malicious les at the gateway providing a 1st line of defense for your network.

Web Content Filtering

Blocks access to websites by category allowing you to restrict inappropriate content in the workplace and keep your sta more productive.

NetDefend Firewall UTM Services

Features

• Professional Intrusion Prevention System (IPS)

• Automatic Signature Update

• Zero Day Attack Protection

• Real-Time AntiVirus Gateway Inspection (AV)

• Web Content Filtering (WCF)

• Low Cost Licensing, using Per-Firewall Service

Maintenance

Anti-Virus

Web Content Filtering

Intrusion Prevention System

User Authentication

High Performance

Built-In Acceleration Technology

High Port Density

VPN

ZoneDefense Technology

D-Link UTM Firewall

Load Balancing

Availability

Trafﬁc Shaping

Unied Threat Management

D-Link NetDefend UTM rewalls integrate an Intrusion Prevention System (IPS), gateway

AntiVirus (AV), and Web Content Filtering (WCF) for superior layer 7 content inspection

protection. The real-time update service keeps the IPS information, antivirus signatures,

and URL databases current. Combined, these enhancements help to protect oce

networks from application exploits, network worms, malicious code attacks, and provide

everything a business needs to safely manage employee Internet access. Maintaining an

eective defense against the various threats originating from the Internet requires that all

three databases used by the UTM rewall are kept up-to-date. In order to provide a robust

defense, D-Link oers NetDefend Firewall UTM Services which include distinct NetDefend

service updates for each aspect of your defenses: IPS, AV, and WCF. NetDefend Firewall UTM

Services ensure that each of your UTM rewall’s service databases is always accurate and

current. In addition to other fundamental wireless security features including WEP, WPA

Personal/Enterprise, WPA2 Personal/Enterprise, and MAC Authentication to determine

the identity of wireless devices, the HTTP Authentication feature allows you to block

clients from accessing the network until the clients verify their identities. This double-layer

authentication and authorization provides a robust security fence to also protect against

attacks from within the network.

Page 2

NetDefend Firewall UTM Services

My D-Link

My D-Link provides a registration and management platform for all D-Link

customers. D-Link customers need to register their rewall to initiate the IPS

update service from the NetDefend Center’s My D-Link Portal. The current status of

all registered products will be presented, including model names, MAC addresses,

serial numbers, registration dates, and IPS service expiration dates, making it easy

for customers to maintain all of their D-Link rewalls.

NetDefend Live

The NetDefend Center includes a ‘NetDefend Live’ service for our customers.

NetDefend Live is a platform for providing information about potential security

breaches and associated advisories. When D-Link Security Center discovers

new exploits and releases new signatures, associated security advisories will be

simultaneously updated, 24x7x365. The main purpose of NetDefend Live is to

help our customers know more about new signatures and vulnerabilities. IT sta

can use NetDefend Live as reference to uproot threats and patch vulnerabilities

within the enterprise before they are exploited. With NetDefend rewalls as the

rst line of defense and NetDefend Live as the second, D-Link helps customers to

counteract emerging network threats promptly, before they have an impact on

business operations..

NetDefend Intrusion Prevention System (IPS) Subscription

D-Link’s IPS service adopts a unique technology, component-based signatures, which are built to recognize and protect against all varieties of known and unknown

attacks, and which address all critical aspects of an attack or potential attack including payload, NOP sled, infection, and exploits. In terms of signature coverage,

the IPS database includes attack information and data from a global attack sensor-grid and exploits collected from public sites such as the National Vulnerability

Database and Bugtrax.

D-Link is committed to delivering high quality IPS signatures by constantly creating and optimizing NetDefend signatures via the D-Link Auto-Signature Sensor

System. Without overloading existing security appliances, D-Link IPS signatures ensure a high ratio of detection accuracy and the lowest ratio of false positives.

Page 3

NetDefend Firewall UTM Services

Focus on Attack Payload, not Attackers or IP Addresses

The IPS scan engine is an in-depth inspection of data from Layer 2 to Layer 7 protecting against both false positives and false negatives and preventing various types of

network-based threats with a high degree of accuracy.

Zero Day Attack Protection

IPS captures variations of attacks and stealthy malicious trac to

prevent outbreaks of these threats without creating unnecessary

new signatures ,while still protecting against Zero-Day attacks.

Comprehensive IPS Signature Database

Protect the system against network attacks using over 17,000

signatures as well as protocol anomaly inspection.

Complete IPS Signature Advisory

Continuous Automatic Signature Updates

All IPS signatures are continuously updated automatically and made

available through D-Link update servers worldwide. The service

keeps your IPS signature database as current as possible.

Complete IPS logs with vulnerability ID numbers, severity levels,

attack descriptions, and recovery solutions enable IT personnel to

know about and respond quickly to network attacks.

NetDefend Anti-Virus (AV) Subscription

NetDefend UTM rewalls implement stream-based virus scanning technology without rst caching incoming les, thus increasing inspection performance and

easing network bottleneck nightmares while enabling powerful virus defense capabilities.

D-Link’s rewalls use virus signatures from Kaspersky Labs, a reputable name in Antivirus, to provide our customers with prompt signature updates and reliable,

accurate antivirus signatures.

Using a stream-based virus scanning technology, NetDefend UTM rewalls block viruses and malware before they ever reach the desktops or mobile device on your

network. NetDefend rewalls create a safer network environment for companies of all sizes, from SMBs to enterprises.

Up-to-date Protection

D-Link rewall AV defenses rely on Kasperky Labs. Kaspersky Labs is the market leader in AV signature creation, providing the fastest response to the most

dangerous viruses, Trojans, worms, and spyware programs.

Streaming-based Pattern Matching

A streaming-based scan engine inspects all payloads and matches the signature packet-by-packet. File-based AV protection will never encounter a le-size

limitation since D-Link rewalls do not need to store whole les in memory for inspection purposes.

Fast Response Time

All AntiVirus signatures are updated hourly and made available through D-Link update servers worldwide. Emergency signature releases protect against the latest,

most virulent virus variations.

Comprehensive AntiVirus Signature Database

NetDefend’s proactive signature database protects each system against network worms, Trojans, and spyware with signatures covering all Wild List threats and

thousands of well-known OS exploits and application vulnerabilities.

Complete AntiVirus Signature Advisory

Complete antivirus logs with issue dates, behavior and technical details allow IT personnel to become aware of and immediately respond to virus threats and

infections.

Page 4

NetDefend Firewall UTM Services

NetDefend Web Content Filtering (WCF) Subscription

Web surng control is becoming a critical concern for businesses of all sizes. D-Link’s Web Content Filtering (WCF) service enforces access protection and

management policy for Internet usage. NetDefend Web Content Filtering helps IT sta monitor, manage, and control employee usage of and access to the Internet. It

puts Management back in control, enabling a more business-orientated and cost eective use of Internet resources.

Organizations experience signicant cost savings through:

1) A reduction in wasted sta time by reducing inappropriate web surng.

2) Reduced Internet access costs and bandwidth savings by limiting and controlling non-business related uses, thus improving network response.

3) Reducing legal exposure to workplace conicts and liabilities (e.g. sexual harassment cases or pornography and the adverse publicity that such incidents can generate).

4) Reduced costs in recovering from attacks as much less inappropriate content will even be allowed to enter the network.

Global Index Servers

Global index servers maintain databases of millions of URLs and collect real-

time website information in order to keep the data as current as possible.

Multiple servers worldwide enhance performance and maximize service

availability wherever a NetDefend rewall is installed.

Performance Optimized

D-Link implements multiple index servers to enhance performance capacity

and maximize service availability. Categories of recently visited websites are

cached locally in each UTM rewall to maximize performance for subsequent

requests.

Tight Integration with other D-Link Security Gateway Subsystems

D-Link allows you to dene highly-granular policies for allowing or disallowing

where and when access to certain types of websites is permitted, and dierent

policies can be applied to any combination of users, interfaces, and IP

networks.

Static White and Black Lists

Dene websites that will be explicitly allowed or blocked, independent of their

classication. There are 32 default classication groups in NetDefend UTM

rewalls to allow network administrators to control Internet usage.

Active Content Handling

The WCF capabilities of D-Link UTM rewalls can strip potential malicious

objects, such as Java applets, JavaScripts / VBScripts, ActiveX objects and

cookies, all of which are popular methods for hacker attacks.

1. User requests a web page.

Multiple replicated databases are deployed worldwide to

maximize performance and availability.

3. If granted by the corporate surﬁng policy, the user will gain access to the requested website.

Surﬁng policy for engineering department

Adult: Block / Shopping: Block / News: Allow

2. A global database is queried for the category of the web page.

2b. If the database does not contain the

requested information, the web page is downloaded by the database and analyzed using several techniques.

Public web server

Cost-Eective Web Content Filtering

D-Link’s WCF service is priced per rewall instead of per user, so an enterprise-

level organization does not need to contemplate a large TCO for licensing in

order to manage the surng privileges of all employees. One subscription can

provide web surng control for an entire organization.

Page 5

NetDefend Firewall UTM Services

D-Link UTM rewalls are shipped with a 90 day Intrusion Prevention System (IPS), AntiVirus (AV), and Web Content Filtering (WCF) subscription - free of charge. Upon

expiration of these free subscription services, you can extend your subscriptions by purchasing NetDefend UTM subscriptions for specic services. Contact your

D-Link reseller for details.

Subscription Service Ordering Information:

Product Number Product Description

DFL-260-IPS-12 12-month IPS update service for DFL-260/DFL-260E firewalls

DFL-260-AV-12 12-month Anti-Virus update service for DFL-260/DFL-260E firewalls

DFL-260-WCF-12 12-month Web Content Filtering service for DFL-260/DFL-260E firewalls

DFL-860-IPS-12 12-month IPS update service for DFL-860/DFL-860E firewalls

DFL-860-AV-12 12-month Anti-Virus update service for DFL-860/DFL-860E firewalls

DFL-860-WCF-12 12-month Web Content Filtering service for DFL-860/DFL-860E firewalls

DFL-1660-IPS-12 12-month IPS update service for DFL-1660 firewall

DFL-1660-AV-12 12-month Anti-Virus update service for DFL-1660 firewall

DFL-1660-WCF-12 12-month Web Content Filtering service for DFL-1660 firewall

DFL-2560-IPS-12 12-month IPS update service for DFL-2560/2560G firewalls

DFL-2560-AV-12 12-month Anti-Virus update service for DFL-2560/2560G firewalls

DFL-2560-WCF-12 12-month Web Content Filtering service for DFL-2560/2560G firewalls

For more information

©2012 D-Link Corporation/D-Link Systems, Inc. All rights reserved. D-Link, and the D-Link logo, are registered trademarks of D-Link Corporation or its subsidiaries in the United States and/or other countries. Other trademarks or registered trademarks are the property of their respective owners. Visit www.dlink.com for more details.